A portal holds records about identifiable people and lets them reach those records from anywhere, which is a different set of obligations from a public website. These are the requirements this service is designed around, and the line between what we build and what your counsel or your privacy officer decides.
-
PrivacyPIPEDA, Quebec's Law 25, and the provincial private-sector statutes where they apply
What we design forA stated purpose for every record the portal exposes, access scoped so an account reaches its own record and nothing adjacent, sign-in strength matched to what the record holds, consent captured where it is required rather than assumed, and every read and write of a personal record logged.
What we document for your counselWhat the portal exposes, to whom, under which rule, where it is stored, which processors see it, and how long each record type is kept.
-
Health informationWhere the work touches it at all
What we design forNo health information in the portal until the storage region and the handling are settled, and where they are not settled the workflow is scoped to exclude it rather than scoped around it. Booking and account work that touches no health information is a different question and a normal build.
What we document for your counselWhich data classes were excluded and why, so the boundary is something your privacy officer reads rather than infers.
-
Records and retentionIncluding the obligations your own sector carries
What we design forRetention set per record type rather than left at a default, deletion and archival that are designed rather than improvised, an export that produces a readable record, and a log that survives the record it describes.
What we document for your counselThe retention schedule per record type and where each one is enforced, so your counsel or your regulator is reviewing a schedule rather than a screen.
-
AccessibilityWCAG 2.2 AA, plus AODA and the provincial equivalents, and the Accessible Canada Act where it applies
What we design forBoth sides. The customer surface, because a portal a person cannot use is a service they cannot reach, and the staff surface, because it is the screen somebody works in for eight hours. Keyboard, screen reader, contrast and reduced motion, tested rather than asserted, including every error and empty state.
What we document for your counselThe test results per surface and the standard tested against, so a barrier report can be answered with a measurement.
-
Electronic messagesCASL, for the reminders, confirmations and anything commercial
What we design forA clear separation between the message that confirms something a customer asked for and the message that is selling something else, consent and its basis recorded against the record, no pre-ticked boxes, and an unsubscribe on commercial messages that works in one action.
What we document for your counselThe consent basis per contact, the send log, and the classification we built against, so the determination is theirs to confirm rather than ours to assert.
-
LanguageQuebec's Charter of the French Language, where the business operates there
What we design forThe portal, the booking flow, the reminders, the confirmations and the error states authored per language rather than translated at the end, because these are the surfaces a customer meets when something has gone wrong.
What we document for your counselWhich surfaces are authored per language and which are not yet, so the gap is a list somebody owns rather than a surprise.
-
Where the data livesAnd which processor sees it
What we design forThe hosting region, the messaging processor, the payment processor and the backup location named in the scope before the build, chosen rather than inherited from whatever a vendor defaults to.
What we document for your counselEach processor, what it sees, the region it sees it in, and what changes if you move region later.
HUREAL designs to a standard, tests against it, and documents what was built. The determination is your counsel's or your privacy officer's to make, and a vendor offering to make it for them is offering something they do not have. Our own conformance target and how to report a barrier are on the accessibility page.